docker-local
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the management of local development environments through standard Docker Compose commands such as
docker compose up,exec,run, andlogs. These operations are essential for the skill's primary purpose of container orchestration. - [PRIVILEGE_ESCALATION]: The skill includes the command
sudo lsof -i :80within its troubleshooting section. This is a legitimate use of elevated privileges in a local development context to identify and resolve port binding conflicts. - [CREDENTIALS_UNSAFE]: The provided templates contain default credentials (e.g.,
MYSQL_ROOT_PASSWORD: root). These are clearly documented as local development defaults and are accompanied by a best practice recommendation to use.envfiles for actual secrets and to avoid committing passwords to version control. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon local project files such as
docker-compose.yml,Makefile, and.env. While this presents an attack surface for indirect prompt injection, the risk is inherent to the developer-centric nature of the skill and is mitigated by the local execution context and the absence of malicious instruction patterns.
Audit Metadata